Authenticating wifi Users from Azure AD

Question

I have Meraki APs in my organization for end users and we have our user information in Azure AD. I want my users to be able to authenticate from Azure AD before being granted access to WIFI. I have been unsuccessful in this regard. I also tried creating a VM running server 2019 and made it a DC to sync with Azure AD and use as radius server for Authentication. Unfortunately, AD connect syncs on Prem user accounts to Azure AD and not the other way round. Also given the fact we don't have any on-prem DC, I will like the users to be able to authenticate to Azure AD. I will like a walkthrough or documentation from someone who has successfully implemented this.

Answer 1

Hi @Relax , to allow your users to authenticate from Azure AD before being granted access to WIFI, you can use RADIUS authentication with Azure AD. Here are the steps to configure RADIUS authentication with Azure AD:

1. Create a new Azure AD application registration for RADIUS authentication.
2. Configure the RADIUS client in Azure AD. You can follow the steps here to configure the RADIUS client in Azure AD.
3. Configure the RADIUS server. You can use the NPS extension for Azure MFA to configure the RADIUS server. You can follow the steps here to configure the NPS extension for Azure MFA.
4. Configure the Meraki APs to use RADIUS authentication. You can follow the steps here to configure the Meraki APs to use RADIUS authentication. I hope this helps you to configure RADIUS authentication with Azure AD for your Meraki APs. Let me know if you have any further questions. If this answer helps you please mark it as "Verified" so other users can reference it. Thank you, James

Answer 2

Hello Team,

For the same requirement, Merkai Support suggested a workaround- Please go through it. I have not tested it yet.

https://apicli.com/2021/12/13/meraki-mr-802-1x-with-azure-active-directory/